Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Apr 16, 2026
CVE-2004-2354
CVE-2004-2354
Description
SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.
Affected products
10cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*
- cpe:2.3:a:warpspeed:4nguestbook:0.92:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- archives.neohapsis.com/archives/bugtraq/2004-03/0139.htmlnvdExploitVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/15478nvd
News mentions
0No linked articles in our index yet.